CVE-2023-0577 Multiple XSS in ASOS Information Technologies' Sobiad

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies SOBIAD allows Cross-Site Scripting XSS. This issue affects SOBIAD: before 23.02.01...

CVE-2023-0577

CVE-2023-0577 involves ASOS Information Technologies’ SOBIAD before version 23.02.01. The root cause is improper neutralization of input during web page generation, resulting in a Cross-site Scripting (XSS) vulnerability. Affected component is SOBIAD’s input handling/rendering path prior to 23.02...

CVE-2023-0577 Multiple XSS in ASOS Information Technologies' Sobiad

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies SOBIAD allows Cross-Site Scripting XSS. This issue affects SOBIAD: before 23.02.01...

[SECURITY] [DLA 2950-1] python-scrapy security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2950-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 16, 2022 https://wiki.debian.org/LTS -...

Debian DLA-2950-1 : python-scrapy - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2950 advisory. It was found that Scrapy, a framework for extracting data from websites, could send HTTP Authorization as well as cookies to other domains in case of redirections,...

CVE-2022-0577

creationtimestamp| type| source ---|---|--- 2022-03-02 07:24:42+00:00| seen| https://t.me/cibsecurity/38286...

CVE-2022-0577

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1...

CVE-2022-0577

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1...

CVE-2022-0577 Exposure of Sensitive Information to an Unauthorized Actor in scrapy/scrapy

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1...

CVE-2022-0577

CVE-2022-0577 affects Scrapy (scrapy/scrapy) prior to 2.6.1, where sensitive information could be exposed to an unauthorized actor. Public sources describe leakage related to redirections where HTTP Authorization headers and cookies may be sent to unintended domains. Several connected advisories ...

CVE-2022-0577

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1...

SUSE: Security Advisory (SUSE-SU-2022:0577-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0448)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-0577

CVE-2021-0577 affects the Android flv extractor component. The issue is described as an out-of-bounds write caused by a heap buffer overflow, leading to local privilege escalation with no additional execution privileges required and no user interaction needed. The vulnerability is labeled high se...

CentOS 8 : thunderbird (CESA-2020:0577)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:0577 advisory. - Mozilla: Message ID calculation was based on uninitialized data CVE-2020-6792 - Mozilla: Out-of-bounds read when processing certain email messages...

CVE-2020-0577

creationtimestamp| type| source ---|---|--- 2020-04-15 20:44:30+00:00| seen| https://t.me/cibsecurity/11280...

CVE-2020-0577

Insufficient control flow for IntelR Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-0577

Intel Modular Server MFS2600KI Compute Module is affected by CVE-2020-0577 due to insufficient control flow, allowing an unauthenticated user to potentially escalate privileges via adjacent access. The Intel advisory also covers CVE-2020-0576 and CVE-2020-0578 on the same module. The advisory sta...

Intel® Modular Server Compute Module Advisory

Summary: A potential security vulnerability in Intel® Modular Server MFS2600KI Compute Module may allow escalation of privilege or denial of service. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® Modular Server...

RHEL 8 : thunderbird (RHSA-2020:0577)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0577 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 68.5.0. Security Fixes: Mozilla:...